ddd-validate

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The content is mostly a benign static-analysis workflow, but it explicitly instructs running an external CLI (npx @claude-flow/cli@latest) to store and post results — a deliberate network action that can download and execute remote code and exfiltrate analysis data, representing a supply-chain and data-exfiltration risk.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill executes "npx @claude-flow/cli@latest" at runtime, which fetches and runs remote code from the npm registry (external dependency required to store/post results), so it directly executes remote code during runtime.